Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File:                     QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier:          wmvT6pzD6/oqru9f6fCL3l7lp9O3tsPwAwpxPyb5u7g=
Subject key identifier:   1D:4B:99:4A:E5:9A:EE:C6:E3:F6:81:72:1D:BB:EE:87:68:A8:2D:F5
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer:       /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial:       019D390A5D5EDFE2CA806BAE4136BE88D637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number:          1365
Signing time:             Sun 29 Mar 2026 10:01:13 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:13 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:13 +0000
Files and hashes:         1: LaPWaYnRdzPOHVggeMAoRuWpL4k.roa (hash: CbyTkBWUaIRYJheYloFSm5P53K+AiwdJChkgXRTNeqo=)
                          2: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: a0jcdOF/KT6AFZevQl+n++DxTjDmiYIes6FNQkj6bLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:5d:5e:df:e2:ca:80:6b:ae:41:36:be:88:d6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
        Validity
            Not Before: Mar 29 10:01:13 2026 GMT
            Not After : Mar 30 10:01:13 2026 GMT
        Subject: CN=1d4b994ae59aeec6e3f681721dbbee8768a82df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:34:3b:3b:06:81:ff:83:e9:87:d9:02:79:12:
                    cb:b9:30:5c:de:5a:ff:dc:1b:28:96:9e:4c:e8:34:
                    e6:48:42:2c:dd:f2:00:fc:1f:5c:1c:3a:f4:a3:21:
                    79:3e:c5:39:cb:96:46:fd:a6:7d:dd:7f:28:1c:83:
                    2f:dc:00:0b:84:4e:75:ae:94:d9:08:42:d5:36:68:
                    98:95:7a:6b:9b:a7:be:7e:47:ae:57:95:84:e0:b2:
                    0a:33:ff:9e:db:b7:15:e1:81:08:47:77:d7:3e:4a:
                    7b:af:d5:66:6f:91:83:02:36:64:94:8e:bd:54:2d:
                    9e:41:98:a5:71:70:47:b1:d1:f1:46:fc:85:be:a3:
                    95:20:d1:13:0f:78:5c:b5:4b:41:b5:db:19:23:bb:
                    2e:da:72:82:d1:c5:9d:c3:8b:5d:bb:44:46:12:7b:
                    93:7b:94:b9:c2:b3:27:e3:ca:6d:ef:f9:14:f3:cd:
                    58:b7:bc:8e:77:f9:ae:74:8a:9f:65:20:f0:9a:ae:
                    06:a4:da:7a:65:b6:bd:38:8d:4c:7e:6e:60:3b:9c:
                    b3:79:ea:bf:7e:0e:b2:cd:0c:fe:57:44:a3:f4:57:
                    18:b5:22:08:b9:c4:8f:c3:31:27:50:d7:78:3e:e1:
                    f1:7e:e6:b7:be:b3:a4:f3:aa:7d:4c:bd:95:7f:bd:
                    61:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4B:99:4A:E5:9A:EE:C6:E3:F6:81:72:1D:BB:EE:87:68:A8:2D:F5
            X509v3 Authority Key Identifier:
                keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d3:93:81:2c:b4:8e:6a:7e:06:04:9b:9c:13:f2:a8:9d:bf:
         1f:19:34:df:b1:af:3d:fb:c9:cb:9a:5a:68:ee:47:58:8b:15:
         3a:57:09:2e:50:41:99:00:e6:75:96:33:df:f6:20:c4:b8:72:
         ca:d1:15:42:53:a0:e6:b2:aa:a8:9b:45:96:b0:5f:a7:4a:97:
         ea:a9:c3:5a:9c:72:b9:84:2e:08:c7:1d:5c:a6:3a:6c:70:2d:
         67:c2:e2:cf:74:0f:97:a4:c2:7f:d4:30:31:e9:a7:32:75:e4:
         f4:fb:27:9b:a8:ea:44:f3:fe:60:85:4c:72:9d:fa:c8:7b:e0:
         4b:0f:7c:50:2c:bc:bf:d7:af:8b:0b:3b:36:b7:f2:cc:63:b6:
         bc:05:0f:8a:0e:47:f5:91:e6:8f:53:d9:69:e7:6b:89:39:ab:
         39:64:3e:f3:ff:e9:2e:f8:a9:7c:65:89:c2:be:16:82:82:ea:
         b8:f9:b5:e6:2d:06:17:6b:67:8e:bb:52:be:1f:cd:74:d5:cc:
         ac:02:6c:7d:3b:63:32:fc:b7:c7:7d:b2:02:f1:56:55:4c:53:
         6d:bb:2c:5e:0b:0b:d1:06:2d:79:5c:39:cc:ef:f3:1f:08:b1:
         4e:59:45:22:ad:5f:0e:20:2d:c1:06:a0:7d:df:77:f6:8c:58:
         7a:85:16:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:59 2026 by rpki-client